STIGUI
V-223469CAT II — Medium severitySV-223469r1268949_rule

IBM z/OS TSO GSO record values must be set to the values specified.

Rule version ACF2-ES-000510 · STIG v9 · 2026-09-01

Discussion

Configuring the operating system to implement organization-wide security implementation guides and security checklists ensures compliance with federal standards and establishes a common security baseline across DoW that reflects the most restrictive security posture consistent with operational requirements.

Check

From the ACF Command screen enter: SET CONTROL(GSO) LIST TSO

If the GSO TSO record values conform to the following requirements, this is not a finding.

ACCOUNT(1) BYPASS(#) CHAR(BS) CMDLIST() NOIKJEFLD1 LINE(ATTN) LOGONCK PERFORM(0) PROC(site defined) NOQLOGON REGION(site defined) SUBCLSS() SUBHOLD() SUBMSG() TIME(0) TSOSOUT(A) UNIT(SYSDA) WAITIME(1-60)

Fix

Configure the GSO TSO record values to conform to the following requirements.

ACCOUNT(1) BYPASS(#) CHAR(BS) CMDLIST() NOIKJEFLD1 LINE(ATTN) LOGONCK PERFORM(0) PROC(site defined) NOQLOGON REGION(site defined) SUBCLSS() SUBHOLD() SUBMSGC() TIME(0) TSOSOUT(A) UNIT(SYSDA) WAITIME(1-60)

Example: SET C(GSO) INSERT TSO ACCOUNT(1) BYPASS(#) CHAR(BS) CMDLIST() NOIKJEFLD1 LINE(ATTN) LOGONCK PERFORM(0) PROC(IKJACCNT) NOQLOGON REGION(4,096) SUBCLSS() SUBHOLD() SUBMSGC() TIME(0) TSOGNAME() TSOSOUT(A) UNIT(SYSDA) WAITIME(60)

F ACF2,REFRESH(TSO)

Identifiers

Group ID
V-223469
Group title
SRG-OS-000480-GPOS-00227
Rule ID
SV-223469r1268949_rule
Check ID
C-25142r504525_chk
Fix ID
F-25130r504526_fix